Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa
File:                     AS134176.roa (raw, json)
Hash identifier:          ohjoVLd33cn30YfZcktljkokAWAusar46Byz/ScgkPA=
Subject key identifier:   E7:67:7D:7E:1A:9E:E0:5C:D4:0F:26:66:1D:CA:84:58:CE:A3:B6:EE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4D0232280DF45FD82946B4A0252D52B670A754AD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa
Signing time:             Fri 02 Feb 2024 02:06:19 +0000
ROA not before:           Fri 02 Feb 2024 02:01:19 +0000
ROA not after:            Fri 31 Jan 2025 02:06:19 +0000
asID:                     134176
IP address blocks:        192.228.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:32:28:0d:f4:5f:d8:29:46:b4:a0:25:2d:52:b6:70:a7:54:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb  2 02:01:19 2024 GMT
            Not After : Jan 31 02:06:19 2025 GMT
        Subject: CN=E7677D7E1A9EE05CD40F26661DCA8458CEA3B6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:39:ca:59:26:2b:b4:b1:65:de:a4:cb:2d:
                    ca:52:bb:92:84:de:de:85:b5:8b:d0:26:ac:14:75:
                    94:52:f5:2b:c2:65:dc:6d:72:ee:4e:88:72:ee:71:
                    07:7c:0f:64:02:51:d3:db:26:94:e5:56:b4:2f:31:
                    32:08:e6:40:36:fd:59:70:05:04:7e:bd:cf:fb:f0:
                    e5:00:e1:1e:41:c9:aa:14:11:9d:51:42:6e:0f:b0:
                    97:99:41:cd:58:33:bf:5a:bb:0f:c1:51:64:99:3a:
                    84:3b:db:01:96:44:94:50:9d:7e:96:d7:e8:da:92:
                    18:98:98:ee:3f:a7:f6:36:81:7a:b4:fe:7e:1d:82:
                    73:70:a1:3d:26:71:a6:a8:e5:28:6e:30:2d:dc:d2:
                    3c:1f:f5:62:7c:64:b4:44:3d:30:d8:5c:58:2c:c0:
                    87:e4:50:40:60:e2:af:d3:7d:68:f2:66:b1:49:e2:
                    e5:94:9b:45:88:32:a0:8c:91:6c:4d:aa:6c:d0:a0:
                    aa:df:ff:59:57:ff:c7:ef:ef:d0:97:18:c7:83:34:
                    39:28:4d:12:f0:eb:32:8b:3f:2a:b1:13:c3:e9:2c:
                    1a:1a:d1:80:78:fa:4a:a4:e6:df:e8:5f:ca:05:47:
                    9b:4d:39:a4:f9:3f:b6:20:0d:1f:71:aa:65:3a:5f:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:67:7D:7E:1A:9E:E0:5C:D4:0F:26:66:1D:CA:84:58:CE:A3:B6:EE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS134176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:7e:b3:aa:5e:30:ce:69:3d:ae:bf:1a:96:18:da:4b:ed:
         7d:89:fb:aa:6c:7f:e6:69:bc:de:0d:f6:a9:f5:f6:06:7b:26:
         e7:28:29:f9:57:70:7b:61:c3:a3:8d:ba:7e:58:3f:ed:9c:55:
         7d:7c:f8:8f:a1:f3:d7:d8:23:9d:97:b2:31:00:a0:1c:09:dd:
         cc:33:ed:5e:97:bf:55:06:11:2f:c4:6f:12:7f:50:f9:7a:9e:
         cf:39:57:bb:3e:36:fa:be:24:f3:a4:c7:39:2c:5a:6d:7d:52:
         a6:eb:66:e1:82:9b:21:2e:c7:ad:28:17:d2:c2:64:68:8a:2b:
         72:66:1d:85:d5:77:ba:f6:53:1b:06:43:45:50:b8:01:83:97:
         b8:77:42:48:64:77:d9:89:4d:15:cb:fa:09:8c:38:37:cc:39:
         f6:56:b4:26:96:a7:cb:7b:48:54:6c:92:cf:f2:e2:fb:f2:91:
         9a:04:78:ed:ee:21:de:21:bd:2d:b9:af:15:1d:7c:c8:f6:71:
         4a:a6:9f:41:00:4e:f2:89:0b:c6:89:ae:e3:8f:43:9c:f6:95:
         54:ae:f2:10:84:b9:72:93:c4:e7:f6:ef:c9:5e:0d:33:5b:fd:
         ed:9d:90:e9:3d:7a:36:06:59:d9:fb:da:dd:99:3e:bc:f8:89:
         31:7e:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org